Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer
File:                     9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer (raw, json)
Hash identifier:          dpgZl+C+HiV82oON8J6xoHatEXo4puISsGpKu0Uh2BQ=
Subject key identifier:   D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F11E13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 22 Nov 2020 22:18:37 +0000
Certificate not after:    Thu 08 Aug 2024 21:30:26 +0000
Subordinate resources:    AS: 265798
                          IP: 131.221.64.0/22
                          IP: 2803:cb80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15801875 (0xf11e13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 22:18:37 2020 GMT
            Not After : Aug  8 21:30:26 2024 GMT
        Subject: CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:bd:50:fc:1a:fa:3e:c9:31:c5:67:52:18:
                    e0:96:9f:ac:f9:f0:83:e2:47:c5:83:18:30:b0:84:
                    9e:08:8b:84:32:4a:b3:4a:14:1d:fd:65:71:77:84:
                    ba:61:a7:b9:58:03:02:f0:8d:cc:de:63:dd:61:e6:
                    17:79:b6:ab:6f:08:12:87:13:12:a3:aa:30:18:13:
                    d8:c6:13:71:8f:44:d9:5b:64:81:1c:7e:8c:23:a5:
                    31:4f:be:8e:12:66:dd:ae:d2:24:d1:15:31:43:3e:
                    f5:61:ba:0e:0f:55:43:25:21:00:93:4a:5f:ef:20:
                    05:37:01:a6:7f:ea:c9:4d:6c:56:8a:42:a6:74:9b:
                    f4:7f:e4:a0:e8:53:36:e6:d1:7e:22:d1:32:08:cd:
                    82:6a:96:13:26:da:7c:8a:2c:1d:db:f4:e4:b2:e9:
                    16:3d:df:6b:d9:34:0c:13:52:4a:49:f0:56:9f:4e:
                    96:a7:10:87:d1:5c:a3:17:d4:59:31:b7:aa:c8:67:
                    58:69:2c:f4:9d:f8:54:6b:fc:e5:57:5e:bb:0f:3d:
                    45:be:b2:48:5d:db:02:18:bd:4f:a8:38:ef:d8:f9:
                    09:8a:c6:b3:b2:ad:25:63:13:5e:7a:7e:43:a8:30:
                    67:0d:d3:33:2c:35:d6:61:3b:e1:ef:b9:c5:7c:2e:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.64.0/22
                IPv6:
                  2803:cb80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265798

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:b7:90:09:88:79:99:5b:0d:88:31:e3:a5:20:b0:4b:fc:
         5c:c7:37:52:0d:5e:d8:e5:2f:3e:ed:fc:fd:bc:7f:0a:ee:ed:
         fc:b2:8d:9b:ea:11:bd:98:3b:44:41:86:94:87:92:74:8b:87:
         15:d8:0e:59:c3:b7:41:41:a5:a8:24:7d:fb:74:f0:fa:84:66:
         03:b6:89:e5:bb:8f:48:fc:7b:8d:4b:b2:ab:6b:17:84:32:1f:
         22:cd:f4:a0:18:3f:1e:04:27:bf:a4:7c:c0:65:ee:a8:ca:5d:
         4b:40:07:fc:2a:f1:b5:cc:48:a3:61:b5:dd:df:15:5f:a8:01:
         67:86:7d:72:2e:a1:07:b6:52:e2:72:91:98:7b:ed:0f:af:48:
         21:c6:3c:9f:78:82:bd:29:33:8a:e8:fd:9b:8a:63:c4:50:39:
         02:d1:89:28:2c:1f:a2:5a:0c:42:7b:63:b2:7c:eb:3a:fa:ea:
         9c:8b:90:ae:f9:27:e9:76:52:fc:83:22:26:a8:08:f4:de:89:
         1a:0f:6a:d1:aa:27:b7:8b:f3:3e:50:03:49:0f:84:a7:28:04:
         15:9e:a6:59:cd:47:51:94:55:83:ac:82:c6:90:0a:d6:d6:31:
         cf:33:22:7d:2a:94:a2:cb:2e:bd:93:5e:de:fb:46:0c:c0:40:
         2a:93:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:13 2024 by rpki-client on console-ams.rpki-client.org